How can I create SSL Certs from the CLI?

[hightechzen]

Hi,

I have been trying to figure out the cert manager from the CLI so I can script it.  I tryed using easy-rsa, but the certs it creates do not appear listed in the GUI.  Also, where does pfSense store the certs?  I can't find a cert directory.  And lastly, after a cert is created, I need a client over-ride to match it to assign fixed IP's - I can't find the client files on the machine anywhere either.

Is everything stored in a database somewhere?  If so, how do I access it, pull/push certs into it, etc.

Thanks!

[jimp]

There is not a cert creation script for the CLI at this time. The certs are held in config.xml with the other configuration data.